Identity Governance & Administration (IGA) platforms manage the identity lifecycle and access-governance controls across the application estate. Core capabilities include automated joiner/mover/leaver provisioning and deprovisioning, access request and multi-stage approval workflows, periodic access certifications and recertifications, segregation-of-duties (SoD) enforcement for ERP and financial systems, role mining and role-based access modeling, and detailed audit logging for compliance. IGA is distinct from the authentication layer (handled by the IdP) and from privileged account control (handled by PAM) — it governs what access entitlements each identity should have and provides the audit trail regulators require.